CVE-2024-21489
1 advisory.
npm/uplot CVE-2024-21489: high 8.2, EPSS 0.71%
uPlot Prototype Pollution vulnerability
Action: Upgrade uplot to 1.6.31 or later.
npm i uplot@1.6.31Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.6.31 | - |
Fixed versions
| 1.6.31 |
Sources
- osv: GHSA-34q8-jcq6-mc37
- https://nvd.nist.gov/vuln/detail/CVE-2024-21489
- https://github.com/leeoniya/uPlot/commit/5756e3e9b91270b303157e14bd0174311047d983
- https://github.com/leeoniya/uPlot
- https://github.com/leeoniya/uPlot/blob/c52e5001c1d959a99ac495a53e4deca5c44464d2/src/utils.js#L437-L452
- https://security.snyk.io/vuln/SNYK-JS-UPLOT-6209224
CVE-2024-21489 · published · modified · JSON